Skip to main content

More BlackBerry image problems: RIM warns of BES security vulnerabilities

 

More BlackBerry image problems: RIM warns of BES security vulnerabilities

 

If it weren't enough finding themselves (rather unfairly in my point of view) in the firing line regarding how the BlackBerry Messaging service (BBM) was being used by British rioters, with calls for the service to be suspended, RIM now finds itself with a different kind of BlackBerry image problem.

RIM, the firm behind the popular BlackBerry smartphone, has issued a warning that a number of vulnerabilities have been found in its enterprise software (known as BlackBerry Enterprise Server, or BES).

According to RIM, if the vulnerabilities were exploited by remote hackers they could run malicious code on the BlackBerry Enterprise Server run by many firms.

Specifically, the problem is with the BlackBerry MDS Connection Service and the BlackBerry Messaging Agent, and how they process PNG and TIFF images for rendering on the BlackBerry handheld devices.

In this particular case, the threat is that BlackBerry users could be tricked into clicking on a link or visit a booby-trapped webpage, taking them to a malformed image file.

It's important to underline that these are not vulnerabilities in the BlackBerry smartphones themselves. Like other BlackBerry-related vulnerabilities we've seen in the past, the potential attack is against the BlackBerry Enterprise Server used by businesses.

The risk is that by exploiting the flaw, hackers might be able to plant malicious code on your BlackBerry Enterprise Server that opens a backdoor for remote access.

Depending on how your network infrastructure is set up - intruders might be able to see into other parts of your network and steal information.

Alternatively, the hackers' code might cause your systems to crash - perhaps interrupting communications.

 

 

Thanks & Regards

 

Mohammed Rahman Mecheri

 

System Analyst – Network & Infrastructure
Kamal Osman Jamjoom Group LLC.
Unit #422, Sultan Business Centre
P.O Box 27844, Dubai, UAE
Tel:       +971 (4) 3355232 Extn: 1339
Fax:      +971 (4) 3355231
Mobile:  +971 (50) 9774048
Email:  
mohammed.rahman@kojamjoom.com

http://www.kojamjoom.com

 

 

 

Comments

Popular posts from this blog

Tech Tips - Turn on Delegate Access

Turn on Delegate Access A delegate automatically receives Send on Behalf permissions. This means your delegate can do the following: ·          Respond to a meeting request sent to you, the manager. ·          Receive meeting request responses sent to you, the manager. ·          Compose and send an e-mail message that, when received, will have Delegate Name   on behalf of   Manager Name   next to   From . By default, the delegate can read only the meeting requests and responses sent to the manager. The delegate does not have access to read any other messages in your   Inbox . 1.      On the   Tools   menu, click   Options . 2.      Click the   Delegates   tab, and then click   Add . If the   Delegates   tab or the   Add   button is mi...

How do I choose my password?

How do I choose my password? Your password is more than just a key to your online account. If your password falls into the wrong hands, someone can easily impersonate you while online, sign your name to online service agreements or contracts, engage in transactions, or change your account information. So, choose your password carefully and then keep it safe from others. A password is like a toothbrush: Choose a good one and don't share it. A Yahoo! password can be any length, and can contain spaces, symbols, or numbers. With so many options, you should be able to come up with a password that's easy for you to remember but impossible for someone else to figure out. A password is a secret that only you should know. Here are some tips for choosing a strong password - one that is difficult to guess. . Choose a password you'll remember. It should be memorable for you (so that you don't have to write it down or leave it in the open), but difficult for others to guess....

Tech Tip - How to Search Like a Pro

Technology Tip - How to Search Like a Pro The internet is big, really, really big.  And it keeps growing bigger every day.  If you want to search it effectively you’re going to need to develop a couple of tricks to help you narrow the search.  Here’s a few real easy ones to integrate into your next search: Using +, - and “ “ (quotes) to narrow your searches: Lets say you were looking up apples on   Google.com .  If you just type in “apples” you get 22 million returns.  A few more sites than you can check in an afternoon so lets narrow the search down.  Let's say that what you're really interested in is   green apples .  To see all the apple websites that also have the word “green” on them type this: Now you will only see those apple sites that also have the word green on them.  Unfortunately we are still getting almost 6 million returned websites: To narrow the search even more lets elimina...